diff --git a/expenses_manager/expenses/management/commands/seed_demo.py b/expenses_manager/expenses/management/commands/seed_demo.py
index 876ced3..f621d2d 100644
--- a/expenses_manager/expenses/management/commands/seed_demo.py
+++ b/expenses_manager/expenses/management/commands/seed_demo.py
@@ -11,6 +11,13 @@ class Command(BaseCommand):
     help = 'Seed demo data for development'
     
     def handle(self, *args, **options):
+        if not settings.DEBUG:
+            raise CommandError(
+                "seed_demo solo puede ejecutarse con DEBUG=True "
+                "(entorno de desarrollo). Abortando para no crear un "
+                "superusuario con contraseña conocida en producción."
+            )
+        
         User = get_user_model()
         
         user, created = User.objects.get_or_create(
@@ -20,13 +27,14 @@ class Command(BaseCommand):
         
         if created:
             user.set_password('demo1234')
-            user.save()
             user.is_staff = True
             user.is_superuser = True
+            user.save()
             self.stdout.write(self.style.SUCCESS("Demo user created"))
         else:
             user.is_staff = True
             user.is_superuser = True
+            user.save()
             self.stdout.write('Demo user exists!!')
             
         # ------------------